For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Eric_Van_Tol_10's avatar
Eric_Van_Tol_10
Icon for Nimbostratus rankNimbostratus
Oct 10, 2005

Selective SNAT rule

Hi all,   I am new to iRules and just implemented my first one today to resolve a problem we've been seeing with NAT. However, I need to create another one and I need to know the correct syntax to...
application delivery
dev
devops
iRules
Eric_Van_Tol_10's avatar
Eric_Van_Tol_10
Icon for Nimbostratus rankNimbostratus
Oct 13, 2005
Okay, now I see it. I think the problem right now lies in the syntax of the rule itself. The 'remote_addr' is actually the remote address of the connection, not the remote address from the perspective of the snat process. So, if my rule is set up as such:


when LB_SELECTED {
   if { [IP::addr [IP::remote_addr] equals "172.19.10.0/24"]} {
       LB::reselect snat none
       log "In LB_SELECTED, using server:"
       log [IP::remote_addr]
   }
}

and I attempt to telnet to my VIP on port 25 from 192.168.200.6, the remote_addr logged is 192.168.200.6, not 172.19.10.x. I tried local_addr, but that just shows 192.0.2.25 as the address (the address of the dummy VIP).